node-postcss-calc 11.2.3-1

Package Information

Description	PostCSS plugin for simplifying CSS calculations This plugin evaluates constant expressions in CSS calc() and other supported math functions, combining compatible units while preserving expressions that depend on runtime values or units that cannot be combined exactly. It supports configurable numeric precision and optional processing of media queries and selectors. A standalone reducer processes CSS value strings without running PostCSS.
Maintainer	Home Assistant Team <team+homeassistant@tracker.debian.org>
Changed By	Edward Betts <edward@4angle.com>
Sponsor	edward@debian.org
Distribution	unstable
Architecture	all
VCS	git: https://salsa.debian.org/homeassistant-team/js/node-postcss-calc.git (browse)
Closes	#1151167
Tracker	https://tracker.debian.org/pkg/node-postcss-calc
Uploaded	3 hours ago

New Package Report

.changes◂

Distribution	unstable
Date	Sat, 17 Oct 2026 15:01:43 +0100
Source	node-postcss-calc
Version	11.2.3-1
Changed-By	Edward Betts <edward@4angle.com>
Architecture	all source

Changelog◂

node-postcss-calc (11.2.3-1) unstable; urgency=medium
 .
   * Initial release. (Closes: #1151167)

.dsc◂

Priority	optional
Component	main
Package-List	node-postcss-calc deb javascript optional arch=all
Section	javascript

debian/copyright◂

Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: postcss-calc
Upstream-Contact: Andy Jansson
Source: https://github.com/postcss/postcss-calc

Files: *
Copyright: 2014 Maxime Thirouin
License: MIT

Files: debian/*
Copyright: 2026 Edward Betts <edward@4angle.com>
License: MIT


License: MIT
 Permission is hereby granted, free of charge, to any person
 obtaining a copy of this software and associated documentation
 files (the "Software"), to deal in the Software without
 restriction, including without limitation the rights to use,
 copy, modify, merge, publish, distribute, sublicense, and/or sell
 copies of the Software, and to permit persons to whom the
 Software is furnished to do so, subject to the following
 conditions:
 .
 The above copyright notice and this permission notice shall be
 included in all copies or substantial portions of the Software.
 .
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
 EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES
 OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
 NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT
 HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
 WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
 FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
 OTHER DEALINGS IN THE SOFTWARE.

DFSG Assistant LLM REVIEW 0 blocker, 1 important, 0 minor

This is an LLM based review using a Debian Inference based workflow. It was not written by a member of the DFSG team and has not been checked by one. It is not a decision on the package: it may be wrong, and it may have missed things.

Reviewed 1 hour ago.

Report◂

DFSG NEW review for node-postcss-calc version 11.2.3-1

Summary

Licensing is DFSG-compliant and debian/copyright is accurate: No
Packaging is of good quality: Yes
Issues: 0 blocker, 1 important, 0 minor
debian/watch: version 5
debian/copyright: machine-readable
Scan before the review: nothing found

Licensing

The code itself is free: the shipped LICENSE is MIT (Copyright 2014 Maxime Thirouin), package.json declares MIT, and no non-free terms, other licences or unlisted copyright notices were found in the 268 scanned files. debian/copyright is DEP-5, includes the full MIT text, and matches LICENSE. However, it attributes every upstream file to Maxime Thirouin under MIT, while seven conformance test files state that they are cribbed from the WPT and @csstools/css-calc test corpora, whose copyright and licence notices are absent from the copyright file.

Packaging

The packaging is clean and conventional for an arch:all Node package: debhelper compat 14 with a minimal dh rules file, correct Build-Depends/Build-Depends-Indep split, all runtime and test dependencies available in the archive, an autopkgtest via the nodejs pkg-js framework, no patches, and a sane initial changelog. Standards-Version 4.7.4 matches Policy 4.7.4.1 in its first two components.

Issues

1. [important] [licensing] debian/copyright does not cover conformance tests adapted from WPT and @csstools

Files: debian/copyright:6-8, test/conformance/csstools-core.test.js:1, test/conformance/csstools-exponential.test.js:1, test/conformance/csstools-trigonometry.test.js:1, test/conformance/wpt-core.test.js:1, test/conformance/wpt-exponential.test.js:1, test/conformance/wpt-rounding.test.js:1, test/conformance/wpt-trigonometry.test.js:1
Basis: inferred from what was read, not seen directly
Evidence: // Cribbed from @csstools/css-calc test corpus: and // WPT (web-platform-tests) subset cribbed from:
Problem: The Files: * stanza attributes every upstream file to Maxime Thirouin under MIT. These seven files state that their cases are cribbed from the WPT (BSD-3-Clause) and @csstools/css-calc (MIT) test corpora, and they carry neither the upstream notices nor a debian/copyright stanza. If the reproduced test material is protectable, debian/copyright is inaccurate for those files and the upstream licence notices have not been retained.
Fix: Add Files: stanzas for the WPT- and @csstools-derived test files with the upstream copyright holders and licences (the BSD-3-Clause text for WPT, MIT for @csstools), or establish and document that only uncopyrightable expression/expected-value vectors were taken.

Verified

Read debian/copyright in full: DEP-5, Files: * MIT (2014 Maxime Thirouin), Files: debian/* MIT (2026 Edward Betts), with a standalone MIT paragraph whose text matches LICENSE.
Grepped the whole tree (excluding .pc/ and debian/cargo-checksum.json) for Copyright, (C), ©, SPDX-License-Identifier, 'Licensed under', 'Permission is hereby granted', GPL/LGPL/Apache/MPL, 'public domain', 'All rights reserved' and non-free phrasing. Only LICENSE, debian/copyright and the package.json "license": "MIT" field matched; no other licence or holder appears. The prescan likewise found no holder missing from debian/copyright.
package.json has "author": "Andy Jansson", but it is an authorship field with no copyright statement; the LICENSE names only Maxime Thirouin, so this is not a separate copyright holder.
No binary, minified, archive or compressed artifacts are present. types/**/*.d.ts are TypeScript declaration output from the JSDoc in src/, as tsconfig.json (declaration, emitDeclarationOnly, rootDir: src, outDir: types) shows; the preferred form is present.
test/corpus/.txt and test/corpus/github/.txt are plain calc() expression lists (the github expressions file is a 23k-line list with no code or notices); the conformance corpus is derived from cssnano fixtures, which are expression data.
Packaging: debhelper-compat 14, dh $@, single arch:all binary; dh-sequence-nodejs-no-lerna and dh-sequence-single-binary are provided by dh-nodejs 0.17.13 and debhelper 14.5.
All dependencies resolve in the archive: node-postcss 8.5.28, node-csstools-css-tokenizer 4.0.2 and node-csstools-css-calc 3.4.3 (both provided by node-csstools-postcss-plugins), nodejs 24.21.0. The tokenizer is the only @csstools module imported by src; postcss is the peer dependency. Runtime and test-only dependencies are correctly divided between Depends, Build-Depends-Indep and debian/nodejs/extlinks (@csstools/css-calc test, postcss test).
debian/tests/pkg-js/test excludes the fast-check-based randomized property tests and the pnpm/package-exports test; I checked that every test file it still selects (including test/property/naive-*.test.js) does not import fast-check.
Standards-Version 4.7.4 against Policy 4.7.4.1 (first two components 4.7, so current enough); changelog is a correct initial unstable entry closing #1151167; Vcs-Git/Vcs-Browser and upstream/metadata are present; no debian/patches.
uscan found the packaged version as the newest upstream release (upstream 11.2.3, packaged 11.2.3).

Not confirmed

package.json declares peerDependencies postcss ^8.5.29, while Debian ships node-postcss 8.5.28 and debian/control does not version the dependency. Whether 8.5.28 is sufficient for this source was not tested.
Whether the pkg-js autopkgtest framework installs Build-Depends-Indep test modules: the conformance test imports @csstools/css-calc, which is only in Build-Depends-Indep and not in the binary Depends. A test run would show whether it resolves.

Proposed changes

None.

Back to Dashboard | View all reviews for this package